CCM-9868: Adding subfilter for lambda logs

Author: sidnhs

infrastructure/modules/lambda/cloudwatch_log_subscription_filter_firehose.tf

@@ -0,0 +1,8 @@
+resource "aws_cloudwatch_log_subscription_filter" "amplify" {
+  count = var.send_to_firehose ? 1 : 0
+  name            = replace(aws_cloudwatch_log_group.main.name, "/", "-")
+  log_group_name  = aws_cloudwatch_log_group.main.name
+  filter_pattern  = var.filter_pattern
+  destination_arn = var.destination_arn
+  role_arn        = var.log_subscription_log_role_arn
+}

infrastructure/modules/lambda/variables.tf

@@ -212,3 +212,27 @@ variable "lambda_at_edge" {
   description = "Enable the lambda insights layer, this must be disabled for lambda@edge usage"
   default     = false
 }
+
+variable "send_to_firehose" {
+  type        = bool
+  description = "Enable sending logs to firehose"
+  default     = false
+}
+
+variable "filter_pattern" {
+  type        = string
+  description = "Filter pattern to use for the log subscription filter"
+  default     = ""
+}
+
+variable "destination_arn" {
+  type        = string
+  description = "Destination ARN to use for the log subscription filter"
+  default     = ""
+}
+
+variable "log_subscription_log_role_arn" {
+  type        = string
+  description = "The ARN of the IAM role to use for the log subscription filter"
+  default     = ""
+}